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Abstract. Let S/R be a finite extension of discrete valuation rings 
of characteristic p > 0, and suppose that the corresponding extension 
L/K of fields of fractions is separable and is ff-Galois for some K-Hopf 
algebra H. Let T>sjr be the different of S/R. We show that if S/R 
is totally ramified and its degree n is a power of p, then any element 
p of L with vl(p) = —vl{'D s / r ) — 1 (mod n) generates L as an H- 
module. This criterion is best possible. These results generalise to the 
Hopf-Galois situation recent work of G. Elder for Galois extensions. 



1. Introduction 

Let L/K be a finite Galois extension of fields with Galois group G = 
Gal(L/K). The Normal Basis Theorem asserts that there is an element 
p of L whose Galois conjugates {a(p) \ o G G} form a basis for the K- 
vector space L. Equivalently, L is a free module of rank 1 over the group 
algebra K[G] with generator p. Such an element p is called a normal basis 
generator for L/K. The question then arises whether there is a simple 
condition on elements p of L which guarantees that p is a normal basis 
generator. Specifically, suppose that L is equipped with a discrete valuation 
vl- (Throughout, whenever we consider a discrete valuation opona field 
F, we assume it is normalised so that vf(F) = ZU {°o}.) We may then 
ask whether there exists an integer b such that any p £ L with vl(p) = b is 
automatically a normal basis generator for L/K. We shall refer to any such 
b as an integer certificate for normal basis generators of L/K. In the case 
that K has characteristic p > 0, and is complete with perfect residue field, 
this question was recently settled by G. Elder [4j. His result can be stated 
as follows: 

Theorem 1. Let K be a field of characteristic p > 0, complete with respect 
to the discrete valuation vk, and with perfect residue field. Let L be a finite 
Galois extension of K of degree n with Galois group G = G&1(L / K) , let 
w = vl^l/k); where T>l/k denotes the different of L/K and vl is the 
valuation on L, and let b 6 Z. 
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(a) If L/K is totally ramified, n is a power of p, and b = —w — 1 
(mod n), then every p G L with vl(p) = b is a normal basis generator 
for L/K. 

(b) The result of (a) is best possible in the sense that, if 

(i) n is not a power of p, or 

(ii) L/K is not totally ramified, or 

(iii) b ^ — w — 1 (mod n), 

then there is some p G L with vi(p) = b such that p is not a normal 
basis generator for L/K 

The purpose of this paper is to show that Theorem[Tl suitably interpreted, 
applies not just in the setting of classical Galois theory, but also in the 
setting of Hopf-Galois theory for separable field extensions, as developed by 
C. Greither and B. Pareigis [5]. A finite separable field extension L/K is 
said to be -ff-Galois, where if is a Hopf algebra over K, if L is an ii-module 
algebra and the map H — > Endif(L) defining the action of H on L extends 
to an L-linear isomorphism L®k H — > End^(L). A Hopf-Galois structure 
on L/K consists of a if-Hopf algebra H and an action of H on L so that 
L is if-Galois. This generalises the classical notion of Galois extension: if 
L/K is a finite Galois extension of fields with Galois group G, we can take 
H to be the group algebra K[G] with its standard Hopf algebra structure 
and its natural action on L, and then L/K is ii-Galois. A Galois extension 
may, however, admit many other Hopf-Galois structures in addition to this 
classical one, and many (but not all) separable extensions which are not 
Galois nevertheless admit one or more Hopf-Galois structures. Moreover, 
if L is ii-Galois, then L is a free if-module of rank 1 (see the proof of [U 
(2.16)]), and, by analogy with the classical case, we will shall refer to any 
free generator of the H- module L as a normal basis generator for L/K with 
respect to H. Our main result is that Theorem 1 holds in this more general 
setting: 

Theorem 2. Let S/R be a finite extension of discrete valuation rings of 
characteristic p > 0, and let L/K be the corresponding extension of fields of 
fractions. Let n = [L : K], let vl be the valuation on L associated to S, and 
let w = vl{Vs/j{) where T) s / R denotes the different of S/R. Suppose that 
L/K is separable, and is H-Galois for some K-Hopf algebra H. Let 6 G Z. 

(a) If L/K is totally ramified, n is a power of p, and b = —w — 1 
(mod n), then every p £ L with vi(p) = b is a normal basis generator 
for L/K with respect to H . 

(b) The result of (a) is best possible in the sense that, if 

(i) n is not a power of p, or 

(ii) L/K is not totally ramified, or 

(iii) b ^ — w — 1 (mod n), 

then there is some p G L with vi{p) = b such that p is not a normal 
basis generator for L/K with respect to H. 
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In Theorem O we do not require K to be complete with respect to the 
valuation vk on K associated to R, and we do not require the residue field of 
R to be perfect. Thus, even in the case of Galois extensions (in the classical 
sense), Theorem [2] is slightly stronger than Theorem [TJ 

We recall that the different V s / R is defined as the fractional S'-ideal such 
that 

V~j R = {x € S | Tr L/K (xS) C R}, 

where Tr L / K is the trace from L to K. In the case that S/R is totally 
ramified and L/K is separable, let p(X) £ R[X] be the minimal polynomial 
over R of a uniformiser II of S. Then T>siR i s generated by p'(H), where 
p'(T) denotes the derivative of p(T) [H III, Cor. 2 to Lemma 2]. (This does 
not require L/K to be Galois, or the residue field of K to be perfect.) The 
formulation of Theorem QJa) in [1] is in terms of p'(II). 

If S (and hence L) is complete with respect to vl, then V^/r is the same 
as the different Dljk °f the extension L/K of valued fields occurring in 
Theorem [TJ Theorem [2] also applies, however, if K is a global function field 
of dimension 1 over an arbitrary field k of characteristic p. In particular, if 
L is an ii-Galois extension of K of p-power degree, and some place p of K is 
totally ramified in L/K, then Theorem [2](a) gives an integer certificate for 
normal basis generators of L/K with respect to H , in terms of the valuation 
vl on L corresponding to the unique place ^3 of L above p and the *}3-part 
of T> L / K . If, on the other hand, there is more than one place of L above 
p, then the integral closure of R in L is the intersection of the corresponding 
valuation rings S of L [8, III. 3. 5]. Thus any one such S will not be finite 
over R, and Theorem [2] does not apply in this case. 

We briefly recall the background to the above results. In the 
(characteristic 0) situation where K a finite extension of the field Q p of 
p-adic numbers, the author and Elder [2] showed the existence of integer 
certificates for normal basis generators in totally ramified elementary abelian 
extensions L/K, under the assumption that L/K contains no maximally 
ramified subfield. This assumption is necessary, since there can be no integer 
certificate in the case L = K(tfn) with Vk(^) = 1- (Here K must contain a 
primitive pth root of unity for L/K to be Galois.) We also raised the question 
of whether the corresponding result held in characteristic p > 0, where the 
exceptional situation of maximal ramification cannot arise. Our question 
was answered by L. Thomas [9], who observed that general properties of 
group algebras of p-groups in characteristic p allow an elegant derivation 
of integer certificates for arbitrary finite abelian p-groups G. Her result 
was expressed in terms of the last break in the sequence of ramification 
groups of L/K, but is equivalent to Theorem [TJ for totally ramified abelian 
p-extensions G. Finally, Elder [4] removed the hypothesis that G is abelian 
by expressing the result in terms of the valuation of the different, and also 
gave the converse result that no integer certificate exists if L/K is not totally 
ramified or is not a p-extension. 
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We end this introduction by outlining the structure of the paper. In §2, 
we review the facts we shall need from Hopf-Galois theory, and prove several 
preliminary results in the case of p-extensions. These show, in effect, that 
the relevant Hopf algebras behave similarly to the group algebras considered 
in [9]. In §3 we develop some machinery to handle extensions whose degrees 
are not powers of p. In [4], such extensions were treated by reducing to a 
totally and tamely ramified extension. For Hopf-Galois extensions, it is not 
clear whether such a reduction is always possible. (Indeed, while a totally 
ramified Galois extension of local fields is always soluble, the author does not 
know of any reason why such an extension could not admit a Hopf-Galois 
structure in which the associated group N, as in §2 below, is insoluble.) 
We therefore adopt a different approach, using a small part of the theory 
of modular representations. We complete the proof of Theorem [2] in §4. 
The ramification groups, which play an essential role in the arguments of 
[I] and [9], are not available in the Hopf-Galois setting, but their use can 
be avoided by working directly with the inverse different. Finally, in §5, we 
give an example of a family of extensions which are not Galois, but to which 
Theorem [2] applies. 

2. Hopf-Galois theory for ^-extensions in characteristic p 

In this section, we briefly recall the description of Hopf-Galois structures 
on a finite separable field extension L/K, and note some properties of the 
Hopf algebras H which arise when [L : K] is a power of p = chav(K). We 
do not make any use of valuations on K and L in this section. 

Let £ be a (finite or infinite) Galois extension of K containing L. Set 
G = Gal(E/K) and G' = Gel(E/L), and let X = G/G' be the set of left 
cosets gG' of G' in G. Then G acts by left multiplication on X, giving a 
homomorphism G — ► Perm(X) into the group of permutations of X. The 
main result of [5] can be stated as follows: the Hopf-Galois structures on 
L/K (up to the appropriate notion of isomorphism) correspond bijectively 
to the regular subgroups N of Perm(X) which are normalised by G. In 
the Hopf-Galois structure corresponding to N, the Hopf algebra acting on 
L is H = E[N] G , the fixed point algebra of the group algebra E[N] under 
the action of G simultaneously on E (as field automorphisms) and on N 
(by conjugation inside Perm(X)). The Hopf algebra operations on H are 
the restrictions of the standard operations on _E[iV]. We write lx for the 
trivial coset G' in X. Then there is a bijection between elements T] of N 
and -fT-embeddings a: L — ► E, given by rj i— > a v where a n {p) = g{p) with 
r]~ 1 (lx) = gG' . The action of H on L can be described explicitly as follows 



(see e.g 



P p. 338]): 



(2.1) 
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Remark 2.1. In [5], E is taken to be the the Galois closure Eq of L over 
K. In this case, the action of G on X is faithful. However, it is clear that 
one may take a larger field E as above: all that changes is that G need no 
longer act faithfully on X. (Indeed, the action of G on both X and L factors 
through Gsl(E/ Eq).) In the proof of Lemma 13. II below, it will be convenient 
to take E to be a finite extension of Eq. 

Let L/K be -ff-Galois, where the Hopf algebra H corresponds to N as 
above. We define 

t H = ^2r]eE[N}. 

r/€N 

Proposition 2.2. We have tn £ H and, for any h £ H, 

htn = tuh = e(h)tn, 

where e: H — » K is the augmentation. In particular, writing Ih for the 
augmentation ideal kere of H , we have 

iHtH = t}jlH = 0. 
Also, t H (p) = Tv L/K (p) for any p G L. 

Proof. Since ./V is normalised by G, each g £ G permutes the elements of N. 
Hence tu S E[N] G = H. For any h = J2ueN ^ v ^ we have 

ht H = ^2 ^ uUr l = \ ^ J \ 77 J = e ( /l ) t #- 

u,r] \ v J \ 77 / 

In particular, if /i G 7# then /it// = e(h)tjj = 0, so = 0. Similarly 

t#/i = e(h)tn and iff/// = 0. Finally, for p £ L we have 

*ff(p) = X] a v(P) = Tt l/k(p)- 

□ 

Remark 2.3. Proposition 12.21 shows that K -tu is the ideal of (left or right) 
integrals of H. 

Corollary 2.4. If Tr L / K (p) = then p cannot be a normal basis generator 
for L/K with respect to H . 

Proof. If p is a free generator for L over H, then the annihilator of p in H 
must be trivial. But if Tr L / K (p) = then p is annihilated by tn 7^ 0. □ 

Lemma 2.5. // [L : K] = p m for some integer m, then any p £ L with 
T^L/k{p) 7^ is a normal basis generator for L/K with respect to H. 

Proof. We first observe that the augmentation ideal Ih is a nilpotent ideal 
of H, since Ih = Ie[n] H H and the augmentation ideal Ie\n] of -E[iV] is a 
nilpotent ideal of .EfiV] because |iV| = [L : K] = p m . Thus Ih is contained 
in (and in fact equals) the Jacobson radical Jh of H. 
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Now consider the -ff-submodule M = H ■ p+ItfL of L. Since L is a free H- 
module of rank 1, and H/Ih — K, the .fT-subspace IhL of L has codimension 
1. But p IhL since Tt l / k (IhL) = itnl^L = by Proposition 12.21 so 
M = L. Since Ih f= Jh, Nakayama's Lemma shows that H ■ p = L, and, 
comparing dimensions over K, we see that p is a free generator for the 
H- module L. □ 

The next result is immediate from Corollary 12.41 and Lemma 12.51 

Corollary 2.6. // [L : K] = p m then p £ L is a normal basis generator for 
L/K with respect to H if and only ifT^L/K{p) 7^ 0- ^ n particular, the set of 
normal basis generators is the same for all Hopf- Galois structures on L/K . 

3. The non-^-power case 

As in Theorem [21 let S/R be a finite extension of discrete valuation rings, 
such that the corresponding extension L/K of their fields of fractions is H- 
Galois for some Hopf algebra H. We do not require S and R to be complete. 
Let vl, vk be the corresponding valuations on L, K. 

Lemma 3.1. Suppose that [L : K] is not a power of p. Then H contains 
nonzero orthogonal idempotents e\, e2 with e% + &i = 1, such that 

Vhi&jP) > v l(p) for all p £ L and j = 1, 2. 

Proof. Let [L : K] = p m r where m > and where r > 2 is prime to p. 
We have H = E[N} G where G = Gal(E/K) and, in view of Remark I27TI 
we may take E to be a finite Galois extension of K, containing L and also 
containing a primitive rth root of unity £r- Let k' be the algebraic closure 
in E of the prime subfield ¥ p . Thus £ r G k' . 

Now let t be the number of conjugacy classes in N consisting of elements 
whose order is prime to p. As \N\ = [L : K] is not a power of p, we have 
t > 2. For any field F of characteristic p containing £ r , the group algebra 
A = F[N] has exactly t nonisomorphic simple modules 18.2, Corollary 
3]. Let J a denote the Jacobson radical of A. Then the semisimple algebra 
A/ Ja has exactly t Wedderburn components, and therefore has exactly t 
primitive central idempotents. Since A is a finite-dimensional F-algebra, we 
may lift these idempotents from A/ J 'a to A. Thus A has exactly t primitive 
central idempotents, (j>x, . . . , (f>t say, and hence has t maximal 2-sided ideals. 
One of these, say the ideal (1 — <pi)A associated to <pi, is the augmentation 
ideal Ia- 

Taking F = k' in the previous paragraph, we obtain orthogonal 
idempotents <pi , . . . , (fit £ k'[N]. But k' C E, and taking F = E, we find that 
4>i, . . . , (fit are again the primitive central idempotents in E'fiV]. The action 
of G on E[N] permutes these idempotents, and fixes (fi\ since it fixes the 
augmentation ideal of S[A r ]. Hence (fi\ £ H. Let e\ = (fii and e2 = 1 — <fi\. 
Then e%, e2 are orthogonal idempotents in H n k'[N] with e\ + 62 = 1, and 
e2 7^ since t > 2. 
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We now show that vti^jp) > vl{p) for j = 1, 2 and for any p G L. Since 
S/R is finite, S is the unique valuation ring of L containing R. Thus each 
valuation ring T of E containing R must also contain S. (There may be 
several such T if R is not complete.) Fix one of these valuation rings T of 
E, and let ve be the corresponding valuation on E. Then any valuation v' 
on E with v'{p) = ve(p>) for all // E if necessarily satisfies = ve(p) 

for all p & L. In particular, for each g £ G, the valuation ve g on E 
must have the same restriction to L as i^. Thus, for each G iV, we have 
v E (cr v (p)) = ve(p) for all p G L. 

Let 

= A,,??, X v £ k'. 

r/eN 

Then, as ej G H, we have 

by (|2.ip . But is algebraic over F p , so either A^ = or ve{\) = 0. We 
then have 

VE(ejp) > mm(v E (\ v ) + v E {<jJp))) > + v E (p). 

As p, ej/? G L, it follows that vi{ejp) > vl(p) as required. □ 

We can now prove case (i) of Theorem [2{b). 

Corollary 3.2. Let S/R be as in Theorem^ and suppose that [L : K] is not 
a power of p. Then, for any b G Z, there exists some p G L with vl(p) = b 
such that p is not a normal basis generator for L/K with respect to H. 

Proof. Take any p' G L with vl(p') = b. With e 1; e2 G H as in Lemma IBTT] 
we have 

p = eip' + e 2 p', fi(eip') > 6, v L (e 2 p') > b. 

It follows that at least one of the summands, say e\p' , has valuation 6. Set 
p = e\p' . Then vl{p) = b but p cannot be a normal basis generator with 
respect to ii", since e 2 p = {&2^\)p' = 0. □ 

4. Proof of Theorem 2 

For this section, the hypotheses of Theorem [2] are in force. In particular, 
S/R is a finite extension of discrete valuation rings of characteristic p > 0, 
and the corresponding extension of fields of fractions L/K is separable of 
degree n. Also, L/K is ii-Galois for some if-Hopf algebra H. 

By Corollary 13.21 we may assume that n = [L : K ] is a power of p. Let 
e be the ramification index of S/R, let w = i , l(^'s , /_r) 5 and let tt and II be 
uniformisers for R and S 1 respectively. By definition of the different, we have 

Tr L/K (U- w S) C i?, Tr L/A -(n— 1 5) g i?, 
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and therefore 

Tr L/x (n e -S) C ttR, Tr L/K (U e - w ~ 1 S) = R. 

Hence there is some x\ £ L with vl(x±) = e — w — 1 and Ti L / K {x\) = 1. For 
2 < i < e, pick x\ £ L with vl{x[) = e — w — i, and set Xi = x' i — Tt L / K (x' i )xi. 
Since Tr L / K (x' i ) £ R and V£ J (x' i ) < vl(x\), we have 

(4.1) vi{xi) = e — w — i for 1 < z < e, 

and clearly 

'l if « = 1; 
otherwise. 



(4.2) Tr L/K { Xi ) 



We first consider the totally ramified case e = n. Then 
iT-basis for L, since the vi(xi) represent all residue classes modulo ra. 
Let p £ L with vi(p) = — u> — 1 (mod n). We may write 



z 9 = J2 a i 



n 

l%Xi 
i=l 

with the ai £ K. Then vi{p) = mmi{nvK(a>i) + (n — w — i)}. The hypothesis 
on p means that the minimum must occur for i = 1. In particular, a\ ^ 0. 
Then, by P~2|) . we have 

n 

T±l/k(p) = ^aiTi L / K (xi) = ai + 0, 

i=l 

and by Lemma 12.51 p is a normal basis generator for L/K with respect to 
H. This completes the proof of Theorem [2ja). 

Next let b £ Z with 6 ^ — 1 — w (mod n). Then b = n(s + 1) — w — i with 
2 < i < n and s £ Z. Set p = ir s Xi, so vl{p) = b by (|4.ip . But T^l/k{p) = 
by (|4.2p . so that p cannot be a normal basis generator by Corollary 12.41 
This completes the proof of Theorem [2] for totally ramified extensions. 

Finally, suppose that S/R is not totally ramified. Given b £ Z, write 
b = e{s + 1) — w — i with 1 < i < e and s £ Z. If % ^ 1 then p = 7r s a;j 
satisfies i>l(p) = b and T^l/k{p) = 0? so as before p cannot be a normal basis 
generator. It remains to consider the case i = 1. Let Z, be the residue 
fields of S, R respectively. Then l/k has degree / > 1 with ef = n, although 
l/k need not be separable. Pick cj £ I with lu fc, let O, £ S be any element 
whose image in Z is cj, and set 

p = Tr s (n - Tr L/x (xiO))xi. 

Then Tr L / K {x\VL) £ Tr L / K (T>~J R ) C f2. Since w and 1 are elements of Z 
which are linearly independent over k, it follows that vl(Q — Tr^/^-(xif2)) = 
vl(£2) = 0, and hence ul(p) = es + ul(^i) = b. But once more we have 
^L/xip) = 0) so that p cannot be a normal basis generator for L/K with 
respect to H. This concludes the proof of Theorem [2j 
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5. An example 

We end with an example of a family of extensions L/K which are H- 
Galois for a suitable Hopf algebra H, but which are not Galois. Theorem 2 
will give an integer certificate for normal basis generators in L/K, although 
Theorem 1 is not applicable. 

Fix a prime number p and an integer / > 2, and set q = p* . Let 
K = F p ((T)) be the field of formal Laurent series over the finite field ¥ p 
of p elements. Then K is complete with respect to the discrete valuation vk 
such that vk(T) = 1, and the valuation ring is R = F p [[T]]. Let b > be 
an integer which is not divisible by p, let a S K be any element with 
vk(oi) = —b, and let L = K(0), where 6 is a root of the polynomial 
g(X) = X q — X — a G iffX]. Also, let F be the unramified extension 
F = F q K of K (where ¥ q is the field of q elements), and let E = LF. Then 
E is the splitting field of g over K, and the roots of g in E are {8+uj \ lo G F g }. 
Thus E is the Galois closure of L/K, and, in particular, L/K is not Galois. 
We are therefore in the situation of §2, with G = Gsl(E/K) of order 
fq, and with O = Gal(£/L) ^ G&\(F/K) ^ Gal(F g /F p ) cyclic of order 
/. Moreover, G' has a normal complement iV = Gal(E/F) = ¥ q in G. 
Thus, in the terminology of [5, §4], L/K is an almost classically Galois 
extension. It therefore admits at least one Hopf-Galois structure, namely 
that corresponding to the group N. 

Now E/F is totally ramified of degree q, and the ramification filtration of 
Gal(E/F) has only one break, occurring at b. Hence, by Hilbert's formula [6l 
IV, Prop. 4], v E {V E / F ) = (b + l)(q - 1). As E/L and F/K are unramified, 
it follows that L/K is totally ramified, and, using the transitivity of the 
different P III, Prop. 8], that v L (V L/K ) = (b+l){q-l). Thus Theorem[!|a) 
applies with w = — 1 — b (mod q). Hence any p £ L with vl(p) = b (mod q) 
is a normal basis generator with respect to any Hopf-Galois structure on 
L/K. 

Remark 5.1. We can equally well apply the above construction to produce 
global examples, where K is not complete: take K be a function field 
of dimension 1 with field of constants F„, take vk to be the valuation 
corresponding to any place of K of degree 1, and take T to be any element 
of K with v K (T) = 1. 
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